7ab8b932a56587b84038e0ee4cfe5cce476b3aacd408f2dfd0be9d6151ff66e8

Analysis

max time kernel
11s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/12/2023, 23:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3dc431e27b69770e2849aa056032a3ce
Size

57KB
MD5

3dc431e27b69770e2849aa056032a3ce
SHA1

2f402821fafd39fa3419007ec92ffb2b2ea12bdf
SHA256

7ab8b932a56587b84038e0ee4cfe5cce476b3aacd408f2dfd0be9d6151ff66e8
SHA512

314e4fc536387c5d593405dca46ffcc2fa780b82371b78756aafa5f3d7562f37b31cb0b195cd33628ce6fcb2debbc72d626c87876e2f2d156999b1af92b1cf8c
SSDEEP

768:XEBGmlno0sHTllEdN1spthLN4/fibwsAff89EFGCBNEYm2wvGJiMTWK2eY:XEBto0szrE/1spTL6E2VPww7WK2eY

Score

6^/10

Malware Config

Signatures

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	3dc431e27b69770e2849aa056032a3ce

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/tcp	3dc431e27b69770e2849aa056032a3ce

/tmp/3dc431e27b69770e2849aa056032a3ce
/tmp/3dc431e27b69770e2849aa056032a3ce
1⤵
- Enumerates active TCP sockets
- Reads system network configuration
PID:1544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...